mirror of
https://github.com/containers/podman.git
synced 2025-08-26 11:33:07 +08:00
Fix inspect to display multiple label: changes
If the user runs a container like podman run --security-opt seccomp=unconfined --security-opt label=type:spc_t --security-opt label=level:s0 ... Podman inspect was only showing the second option This change will show "SecurityOpt": [ "label=type:spc_t,label=level:s0:c60", "seccomp=unconfined" ], Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
This commit is contained in:
@ -520,7 +520,7 @@ func FillOutSpecGen(s *specgen.SpecGenerator, c *ContainerCLIOpts, args []string
|
|||||||
case "label":
|
case "label":
|
||||||
// TODO selinux opts and label opts are the same thing
|
// TODO selinux opts and label opts are the same thing
|
||||||
s.ContainerSecurityConfig.SelinuxOpts = append(s.ContainerSecurityConfig.SelinuxOpts, con[1])
|
s.ContainerSecurityConfig.SelinuxOpts = append(s.ContainerSecurityConfig.SelinuxOpts, con[1])
|
||||||
s.Annotations[define.InspectAnnotationLabel] = con[1]
|
s.Annotations[define.InspectAnnotationLabel] = strings.Join(s.ContainerSecurityConfig.SelinuxOpts, ",label=")
|
||||||
case "apparmor":
|
case "apparmor":
|
||||||
s.ContainerSecurityConfig.ApparmorProfile = con[1]
|
s.ContainerSecurityConfig.ApparmorProfile = con[1]
|
||||||
s.Annotations[define.InspectAnnotationApparmor] = con[1]
|
s.Annotations[define.InspectAnnotationApparmor] = con[1]
|
||||||
|
Reference in New Issue
Block a user